
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json)
Hash identifier: J7liFDIV3k0WZSyGx+BblnXWYpaDHCEQGhZklda0+fQ=
Subject key identifier: 03:4E:08:7B:24:D5:2B:16:A0:D6:B7:D0:A3:D7:5A:60:9F:D4:6E:26
Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Certificate serial: 0823
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
Manifest number: 0817
Signing time: Sat 28 Feb 2026 21:26:10 +0000
Manifest this update: Sat 28 Feb 2026 21:26:10 +0000
Manifest next update: Sat 07 Mar 2026 21:26:10 +0000
Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: XfRAEQci+a2POAOerI4uY0jpiMABEmyPTD2/8/M5fSA=)
2: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: RDAuo0ukbkiW2gxiKwesJ3g1zTBr8ESAl1lXLcl6ncU=)
3: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: Z1uRbBBo1ykDesKGyzNhoAS+Q0kH4ecEfYyBIro/My0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2083 (0x823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Validity
Not Before: Feb 28 21:26:10 2026 GMT
Not After : Mar 7 21:26:10 2026 GMT
Subject: CN=69a35d72-b2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:28:5b:a8:1f:78:81:f0:45:6b:09:a2:94:
20:f5:0d:e9:e8:7e:43:53:65:75:8e:24:98:f7:a3:
d8:25:81:b6:f3:a2:c0:7f:11:76:b8:a6:31:ad:9f:
9e:49:04:50:55:9f:f2:35:d0:b8:7d:77:2d:fc:09:
3f:c9:32:85:ff:eb:19:5f:c1:ae:46:49:e1:7c:64:
11:1a:4f:58:ac:38:7e:8e:74:35:cf:0a:68:b8:85:
59:0e:83:1d:aa:7e:c4:42:1c:67:a8:24:45:e1:2a:
06:39:76:09:bd:ef:d3:79:44:b2:92:2a:58:69:58:
07:ff:ff:10:a6:4e:a3:d4:90:fd:12:29:21:68:26:
e6:65:75:0f:6f:49:d7:01:0a:f2:f4:0e:73:c0:f6:
5b:d6:22:91:ef:a0:5a:14:19:2d:e8:ea:f2:b8:3e:
10:bf:41:0a:3c:63:97:fa:78:0d:62:71:14:15:d5:
2c:d6:21:f9:90:3e:3f:aa:cb:c0:7a:0a:59:9e:6c:
1a:20:7b:77:ba:5b:8b:69:35:70:ca:c8:97:e0:32:
17:1b:f3:34:cf:ae:0c:bc:7c:3c:0d:33:68:99:c3:
91:d2:ea:80:5b:ce:ac:65:fa:2c:4a:0d:f6:58:f5:
62:b9:48:7b:95:80:20:9f:a3:f0:b1:5c:2b:28:08:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:08:7B:24:D5:2B:16:A0:D6:B7:D0:A3:D7:5A:60:9F:D4:6E:26
X509v3 Authority Key Identifier:
keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:be:cc:88:e6:02:05:3e:41:bc:29:2b:bc:06:d6:f8:e6:b9:
b5:6f:1a:e6:c7:ff:36:54:7a:c6:ad:ad:dd:d7:f1:55:7b:5f:
dc:d2:51:43:d0:1e:9a:64:ab:98:07:d3:62:21:76:3f:fd:5c:
09:5f:34:88:9c:ae:53:3c:e7:b2:86:6b:41:96:d8:1e:ab:f0:
2c:5a:9e:42:51:6f:84:5d:63:3b:a4:87:f3:58:fa:8e:40:17:
31:b6:fb:25:50:26:18:44:4d:d3:1e:2d:33:b5:89:9a:ed:78:
22:eb:cf:b1:71:a3:27:26:97:77:9f:60:eb:83:05:2b:65:b2:
4d:f2:dd:bf:3e:c6:81:e8:67:0d:db:bb:d7:c4:9f:3d:90:99:
2a:88:c6:81:15:57:bb:31:e7:e1:e9:73:c2:56:c7:7f:d3:20:
0d:6b:f2:d7:38:75:f4:40:3e:b5:da:db:f0:39:bc:14:22:07:
83:c7:8e:3a:ab:16:8d:7c:59:43:be:6f:d1:05:b6:aa:06:a7:
4e:a6:fa:8a:8c:5f:11:74:96:a7:62:cc:18:48:16:65:40:f8:
57:06:8f:e0:d4:0e:5a:20:62:e4:d2:c1:89:bd:5c:a4:67:0b:
55:b5:b3:fa:91:c2:01:fd:62:bf:d8:cc:6c:6c:2e:9c:16:da:
d0:3b:c2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:57 2026 by rpki-client